Known vulnerabilities in BIG-IP - page 12

Software: BIG-IP
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 380
Public exploits: 33
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BIG-IP BIG-IP is affected by 380 known vulnerabilities: 2 critical, 19 high, 216 medium, 143 low Critical High Medium Low

Vulnerabilities (380)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59883 - NULL Pointer Dereference
CVE-2022-23025
CWE-476 Medium
No
No
14.1.4.4, 15.1.4, 16.1.1 20.01.2022 SB2022012019
#VU59882 - Double Free
CVE-2022-23012
CWE-415 Medium
No
No
14.1.4.5, 15.1.4.1 20.01.2022 SB2022012018
#VU59873 - NULL Pointer Dereference
CVE-2022-23020
CWE-476 Medium
No
No
16.1.2 20.01.2022 SB2022012008
#VU59871 - Resource exhaustion
CVE-2022-23023
CWE-400 Low
No
No
14.1.4.5, 15.1.5, 16.1.2.1 20.01.2022 SB2022012006
SB2022012007
#VU59847 - Resource exhaustion
CVE-2022-23015
CWE-400 Medium
No
No
14.1.4.5, 15.1.4.1, 16.1.0 19.01.2022 SB2022011951
#VU59845 - Resource exhaustion
CVE-2022-23019
CWE-400 Medium
No
No
14.1.4.4, 15.1.4.1, 16.1.2 19.01.2022 SB2022011949
#VU59843 - Resource exhaustion
CVE-2022-23030
CWE-400 Medium
No
No
14.1.4.5, 15.1.4.1, 16.1.2 19.01.2022 SB2022011947
#VU59836 - NULL Pointer Dereference
CVE-2022-23022
CWE-476 Medium
No
No
16.1.2 19.01.2022 SB2022011928
#VU57752 - Resource exhaustion
CVE-2021-25219
CWE-400 Medium
No
No
- 28.10.2021 -
#VU57498 - Improper input validation
CVE-2021-22931
CWE-20 High
No
No
17.5.1.1 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more
#VU56967 - Improper input validation
CVE-2021-3672
CWE-20 Medium
No
No
17.5.1.1 30.09.2021 SB2021093017
SB2021110508
SB2022031104
and 39 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798
CWE-476 Medium
No
No
- 17.09.2021 -
#VU56158 - Improper input validation
CVE-2021-23048
CWE-20 Medium
No
No
13.1.4.1, 14.1.4.3, 15.1.3.1, 16.0.1.2, 16.1.0 30.08.2021 SB2021083011
#VU56156 - Improper input validation
CVE-2021-23039
CWE-20 Medium
No
No
14.1.2.8, 15.1.3, 16.0.1.2, 16.1.0 30.08.2021 SB2021083009
#VU56155 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-23043
CWE-22 Medium
No
No
- 30.08.2021 -
#VU56154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23041
CWE-79 Low
No
No
13.1.4.1, 14.1.4.2, 15.1.3, 16.0.1.2, 16.1.0 30.08.2021 SB2021083007
#VU56153 - Improper input validation
CVE-2021-23044
CWE-20 Medium
No
No
13.1.4.1, 14.1.4.2, 15.1.3.1, 16.1.0 30.08.2021 SB2021083006
#VU56140 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-23025
CWE-78 Low
No
No
13.1.4.1, 14.1.3.1, 15.1.0.5, 16.0.0 27.08.2021 SB2021082711
#VU56138 - Improper input validation
CVE-2021-23034
CWE-20 Medium
No
No
15.1.3.1, 16.1.0 27.08.2021 SB2021082709
#VU56064 - Out-of-bounds read
CVE-2021-3712
CWE-125 Medium
No
No
- 24.08.2021 -


Showing elements 221 - 240 out of 380